Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa
File:                     a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa (raw, json)
Hash identifier:          z9aBHl9coYtE0wcKGof/MbnPd2J9y5k/1ntuTC0nN4k=
Subject key identifier:   4B:20:0D:F5:31:7E:4D:49:C1:58:71:C5:AB:C0:F3:49:68:D1:51:FB
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584ED001E0A364CCF75C99920380
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        69.187.64.0/24 maxlen: 24
                          69.187.69.0/24 maxlen: 24
                          69.187.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e0:a3:64:cc:f7:5c:99:92:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=f17e2ecf-b319-47c5-99b0-c84c394848fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:e8:ef:b1:c5:0b:e6:5b:37:89:16:98:0c:
                    3c:a3:58:f6:6c:c4:10:42:e4:e6:d3:d2:eb:59:2f:
                    77:3f:19:b5:a1:aa:2f:c2:69:3e:ec:1c:88:32:2a:
                    70:8d:45:fd:3c:a6:9b:6d:6b:92:ae:c7:c7:c4:6a:
                    f8:07:27:19:99:b1:a1:90:32:8e:a1:cb:ce:2a:bf:
                    68:e0:b8:d1:ec:b6:76:69:05:5b:27:96:ba:dc:e6:
                    4f:c7:e4:30:82:2d:fb:2e:91:b5:45:e4:23:57:2a:
                    f9:1f:b8:b4:98:28:e9:56:4c:15:a9:1c:26:d7:4c:
                    cc:71:b5:57:08:25:9c:b9:13:07:af:7a:dc:0a:dc:
                    97:05:3d:f9:bd:9a:d1:ab:2f:ca:b8:95:f4:88:98:
                    a9:85:61:2b:2d:cd:6e:9f:96:d4:25:6a:5b:61:d6:
                    38:ae:0b:a2:c9:a6:c1:a2:34:ae:82:04:04:92:20:
                    8f:8a:8e:b4:33:c9:bd:d9:95:6b:03:31:b0:a3:53:
                    24:00:b9:3d:76:3a:15:ff:2e:1e:60:70:fa:5f:3e:
                    65:32:fa:a7:70:24:dc:ab:14:c3:f9:35:62:13:fc:
                    88:21:f2:56:c8:59:44:bb:81:f2:ba:cd:7d:ce:52:
                    9b:68:70:41:c6:91:b5:b7:65:8b:88:ec:6f:81:93:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:20:0D:F5:31:7E:4D:49:C1:58:71:C5:AB:C0:F3:49:68:D1:51:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.187.64.0/24
                  69.187.69.0/24
                  69.187.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:d6:6c:5c:4e:31:17:dc:39:ff:96:f8:97:7f:b1:6e:87:
         ae:79:30:59:38:ef:56:05:31:59:51:65:dd:15:2c:31:f9:43:
         02:00:72:ea:74:5d:94:9a:05:22:f3:4e:2e:52:1e:ca:99:8b:
         ae:88:97:a2:6a:44:54:1a:dd:cb:27:9e:80:ec:fe:95:3d:a0:
         1a:d9:01:4c:99:49:21:5f:a4:13:ee:f0:1d:96:d5:cd:97:25:
         94:9c:87:55:1a:9c:4c:f6:25:2c:00:dd:c2:73:89:1f:e4:d3:
         36:6c:05:6e:42:c8:03:ee:d4:e5:80:ac:9d:08:89:62:0a:18:
         49:82:de:2a:23:06:45:ff:78:1a:e3:d5:6c:b2:c1:4d:fa:96:
         fe:25:81:38:44:35:6e:f6:5b:3e:6d:8e:39:a8:9f:c3:27:be:
         b4:d7:3a:46:f4:75:52:f0:b8:4b:e5:6e:70:c5:85:fb:eb:f7:
         a3:5a:26:59:02:a9:5c:2a:61:fd:5c:60:88:da:1e:e9:28:88:
         52:f1:da:5e:63:ee:87:3a:77:e3:64:93:63:2c:4d:7e:04:fd:
         db:1c:4a:f4:e1:38:70:a7:36:da:b0:d1:62:22:d5:c5:d4:56:
         c1:11:32:2d:f7:7f:52:b1:cb:88:01:c2:e0:c6:7f:3c:d4:75:
         dc:ba:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:07 2026 by rpki-client